Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/353413406F9111F0A3A4988EDAE4EC9C.roa
File: 353413406F9111F0A3A4988EDAE4EC9C.roa (raw, json)
Hash identifier: HBmJBD2t3csCT0b6vSZipExJR3sgXynTv0W1mKC9ztY=
Subject key identifier: A5:F2:59:44:CC:24:36:05:34:F4:6D:6C:96:0D:17:16:DC:21:AC:4B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1571
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/353413406F9111F0A3A4988EDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 11:09:51 +0000
ROA not before: Sat 02 Aug 2025 11:09:46 +0000
ROA not after: Wed 02 Aug 2028 11:09:46 +0000
asID: 834
IP address blocks: 102.129.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5489 (0x1571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 2 11:09:46 2025 GMT
Not After : Aug 2 11:09:46 2028 GMT
Subject: CN=688df1fe-9e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:23:52:b4:c9:fd:57:9c:ca:6c:f0:ca:b8:
a1:0e:6a:ef:00:5f:30:b1:35:0a:2e:22:07:1a:6f:
e5:40:95:56:09:ca:e6:ec:79:82:eb:fc:99:a3:e2:
34:7c:ef:1c:67:e5:76:1b:1a:72:e7:79:ee:bb:59:
d8:ef:84:22:4c:8a:e8:69:44:28:c8:98:b6:9a:f3:
0f:db:37:28:96:2d:bc:ec:0d:0a:72:8c:2c:50:71:
51:ef:b5:38:57:9c:c1:63:06:0c:82:d0:10:e7:a8:
d2:da:ab:a0:cc:38:13:00:0d:ab:7b:09:ab:ad:76:
29:0a:c0:5b:fe:0b:78:c1:bc:82:10:7b:76:d0:05:
86:36:9d:47:6c:f4:a3:b8:aa:58:99:80:4d:47:3e:
e9:fe:a7:05:e6:46:27:cc:c8:09:58:19:eb:2c:df:
da:54:82:1e:44:2c:e5:80:86:0b:4b:04:3f:ab:52:
88:30:67:d8:3c:ac:74:bc:40:d9:da:10:b4:37:7d:
b7:46:cb:3a:e1:e2:6b:70:ce:15:31:1d:70:e2:61:
d6:84:d4:ae:d1:6d:df:e7:29:9e:81:24:2a:bf:91:
71:af:e6:e7:0a:ae:dc:26:d4:d9:bd:fd:34:41:82:
4e:70:22:5d:da:f3:e8:57:50:60:50:20:5a:79:d9:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F2:59:44:CC:24:36:05:34:F4:6D:6C:96:0D:17:16:DC:21:AC:4B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/353413406F9111F0A3A4988EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.130.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:08:b2:fd:c5:80:14:02:27:44:b3:23:3c:7a:1b:6f:23:c8:
16:9e:7d:66:49:68:fd:b2:c6:49:e3:c6:da:8b:4c:9e:c4:e1:
9a:86:49:b6:1b:d1:98:82:e5:78:db:d4:04:44:cb:e7:95:1a:
70:6e:47:ac:71:49:44:ed:2d:6a:af:97:5c:b2:7b:c2:a4:45:
bd:2c:85:f4:b0:a1:ef:8b:ef:78:06:87:dc:a7:7c:27:1c:7e:
26:33:25:78:d3:f4:bd:f2:7f:ea:4b:25:6e:46:33:98:88:bf:
88:ee:01:c8:f8:53:2f:8d:1d:aa:db:61:14:b0:57:c9:6c:15:
5d:7f:74:02:a1:41:02:ce:37:61:48:fe:eb:4c:5b:6e:bd:0a:
01:b6:56:a9:80:5b:13:c0:34:f2:e4:7e:21:a4:ef:eb:d3:93:
b3:a1:93:5e:8b:b3:1a:85:a9:6b:67:94:28:9a:6c:96:be:5a:
05:95:be:6a:47:11:01:0c:2d:82:0b:1f:06:ef:66:dd:dd:cd:
55:55:4b:61:5b:d1:69:37:54:80:2e:7d:dd:dc:66:d3:01:3d:
2a:e2:48:0f:a9:41:8a:c7:a8:05:89:72:7d:73:0a:56:7a:e9:
9f:59:49:11:89:19:25:c5:b2:84:20:de:1b:21:00:d2:49:07:
ca:d8:76:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:08:27 2025 by rpki-client